My Luna Flow

Last updated: June 19, 2026

Luna Flow is built on a simple idea: your cycle data is yours, and only yours. This policy explains exactly what that means in plain English, with no marketing fluff.

If anything here ever changes, we’ll show you the change inside the app before it takes effect.

1. What we collect

We collect only what we need to make the app work. That’s:

• Account info you give us when you sign up. Your email address (so you can sign in), and a name if you choose to share one. If you sign in with Apple, Apple may give us an anonymous relay email, we never see your real one.
• Cycle data you log. Your last period start, cycle length, period length, mood entries, symptom entries, journal entries, workout completions. All of it is stored on your account.
• Optional onboarding answers. Life phase, concerns, sleep, birth control, and what you want from Luna Flow. You can skip any of these. You can edit or clear them in Settings at any time.
• Conversations with Luna (the AI feature). When you ask Luna a question, your messages are sent to our AI provider (Anthropic) to generate a response. Those messages are also saved on your account so Luna can recall context across conversations.
• What Luna remembers. So she feels continuous instead of forgetful, Luna keeps short notes of durable things you tell her in conversation, for example a name you mention often, or something that’s weighing on you. These notes are built only from your own chats with her. You can read every one of them, and delete any or all, in Settings → What Luna remembers.

We do not collect:

• Location.
• Contacts.
• Photos.
• Microphone or camera audio.
• Device advertising identifiers (IDFA).
• Health app data unless you explicitly choose to import it (we don’t ask for this today).

We do not run any third-party analytics, crash reporting, ad SDK, or tracker. There is no Facebook pixel, no Google Analytics, no Mixpanel, no Amplitude, no AppsFlyer.

2. How we use it

We use your data for exactly one purpose: to make the app work for you.

• To show you your cycle phase, predicted dates, and history.
• To compute insights, Echoes, and patterns from the entries you’ve logged.
• To let Luna (the AI assistant) give you relevant responses grounded in what you’ve shared with her.
• To send the one-time codes that let you sign in.

We do not use your data for advertising, targeting, profiling, or any commercial purpose other than running the app you signed up for.

3. Who we share it with

We share your personal data with no one. There is no version of the app where we sell it, lease it, or share it with advertisers, insurers, employers, data brokers, or analytics companies.

The only third parties involved in delivering the service are:

• Our hosting provider (where the server runs). They store the encrypted data on disk on our behalf. They do not access it.
• Anthropic (the company that makes the AI model behind Luna). When you send Luna a message, that message is sent to Anthropic’s API to generate the response. Anthropic does not train on this data, does not retain it long-term, and does not share it. See Anthropic’s privacy policy for details.
• RevenueCat (our subscription manager). Only if you buy Luna Pro: RevenueCat processes the purchase and tells the app whether your subscription is active. It receives an anonymous app user ID and your purchase history. It never receives your cycle data, journal entries, or conversations with Luna.
• Apple (only if you choose Apple Sign In) to verify who you are.
• Our transactional email provider (for delivering the 6-digit code when you sign in by email). They handle the email only; they do not get the rest of your data.

We will never voluntarily share your data with law enforcement. If we are compelled by a valid legal order, we will, where legally permitted, notify you first and resist the order if it is over-broad.

4. How long we keep it

As long as your account exists. The moment you tap “Delete my account” in Settings, your account record and every entry tied to it, cycle data, mood, symptoms, journal, workouts, chat messages, badges, is permanently deleted from our database. There is no soft-delete, no recovery period, no archive.

Backups roll over within 30 days, after which the data is gone from those too.

5. Your rights

You can, at any time, with no need to email us:

• See your data. Settings → Your privacy → “Download my data” gives you a full JSON of everything we store, including what Luna remembers.
• Manage what Luna remembers. Settings → What Luna remembers lets you read every note Luna has formed about you and delete any of them, or all of them, instantly.
• Change your data. Edit your profile, cycle dates, or any individual entry from inside the app.
• Delete your account. Settings → Delete account. One tap, no questions.

If you’re in the EU, UK, or California, you also have rights under GDPR / UK GDPR / CCPA respectively. Email us (below) and we’ll honor them within the legal timeframe.

6. Security

Your data is sent over HTTPS in transit and stored encrypted at rest on our hosting provider. Your account is protected by either a one-time email code or Sign in with Apple, we never store passwords.

If we ever discover a security breach that affects your data, we will notify you within 72 hours of becoming aware of it.

7. Children

Luna Flow is not directed at children under 13. We don’t knowingly collect data from anyone under 13. If you believe a child has signed up, email us and we’ll delete the account.

8. Changes to this policy

If we change anything material in this policy, we’ll show you the change inside the app and let you choose to accept it before continuing. We won’t change it silently.

9. Contact

For privacy questions, data requests, or anything else covered here, email [email protected].